Ransomware gang talked AI agents into doing much of its dirty work
MentionsSophos
The group behind the Aur0ra ransomware has been using AI agents to move through victim networks, collect credentials and work its way up to domain administrator access, according to Sophos. AI-assisted intrusion workflow (Source: Sophos) The company, which tracks the group as GOLD OGRE, recovered artifacts from the Cursor AI coding assistant in late August that show the attackers handing the agents VPN logins, proxy…
Summary from Help Net Security.
Explained
The technology and terms in this story. Learn more
- AttackRansomwareMalware that encrypts an organisation's systems and demands payment, often after stealing data to leak.
- TechnologyAI agentAn AI model that acts on its own: it plans steps, uses tools and takes actions, not just answers.
- TechnologyVPN · Virtual private networkAn encrypted tunnel that puts a remote device on a private network, as if it were plugged in at the office.